last executing test programs: 3m18.697070897s ago: executing program 1 (id=1377): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) 3m18.519512602s ago: executing program 1 (id=1378): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) 3m18.221655931s ago: executing program 1 (id=1379): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) fcntl$setlease(r0, 0x400, 0x0) 3m18.065256896s ago: executing program 1 (id=1380): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 3m17.91164167s ago: executing program 1 (id=1381): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x60000001}, 0x4000000) 3m17.404284816s ago: executing program 1 (id=1387): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) 3m16.9138583s ago: executing program 32 (id=1387): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) 1m56.801791896s ago: executing program 4 (id=2114): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) 1m56.256276323s ago: executing program 4 (id=2121): mlockall(0x7) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 1m55.831119635s ago: executing program 4 (id=2127): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m55.561807894s ago: executing program 4 (id=2132): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2c0, &(0x7f0000000340)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0xc000, 0x0) 1m55.164818055s ago: executing program 4 (id=2137): syz_mount_image$nilfs2(&(0x7f0000000400), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xb1b, &(0x7f0000003240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) 1m54.568198333s ago: executing program 4 (id=2145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x8070bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c804) 1m54.212119294s ago: executing program 33 (id=2145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x8070bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c804) 3.168907855s ago: executing program 0 (id=3204): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="9d", 0x1}], 0x1, &(0x7f00000020c0)=ANY=[], 0xff0}, 0x80) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 2.962019041s ago: executing program 0 (id=3205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x2000, 0x8, 0xffffffffffffffff, 0x20}) 2.62165204s ago: executing program 2 (id=3209): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2.564264222s ago: executing program 0 (id=3210): eventfd2(0xff32, 0x801) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 2.437263285s ago: executing program 2 (id=3212): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 2.369554897s ago: executing program 0 (id=3213): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 2.25744882s ago: executing program 2 (id=3214): r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x23) getdents(r0, &(0x7f0000000240)=""/183, 0xb7) io_uring_setup(0x31, &(0x7f0000000200)={0x0, 0xc89d, 0xc000, 0x8, 0xc1}) 2.156111482s ago: executing program 2 (id=3215): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x63fc) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 2.127438314s ago: executing program 0 (id=3216): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x11c) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000540)={0x7fefeffffe000000, 0x10100001ffffff, 0x1, 0x6}) 1.810006752s ago: executing program 2 (id=3218): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") r0 = fsopen(&(0x7f0000000180)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 1.736486533s ago: executing program 3 (id=3219): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x88, 0x0, @dev, @local}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1.329566844s ago: executing program 2 (id=3220): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c000201"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x124, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x4000880) 1.014660153s ago: executing program 3 (id=3222): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0xb9ddd000) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, &(0x7f0000000180)=0x7, 0xc, 0x0) get_mempolicy(0x0, 0x0, 0xb70, &(0x7f0000ffb000/0x3000)=nil, 0x3) 772.392259ms ago: executing program 5 (id=3223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 767.573929ms ago: executing program 3 (id=3224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 665.037592ms ago: executing program 0 (id=3225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x9, 0x13, @l2={'ib', 0x3a, 'team0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x200c48a4) 568.223455ms ago: executing program 3 (id=3226): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f0000004c40)={[{@gid}, {@barrier}, {@uid}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@nobarrier}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp775'}}, {@barrier}, {@creator={'creator', 0x3d, "1e1419ce"}}]}, 0xee, 0x5e5, &(0x7f0000000680)="$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") mount$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x200001, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x104b82b, 0x0, 0x1, 0x0, &(0x7f0000000880)) 567.927385ms ago: executing program 5 (id=3227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 369.02277ms ago: executing program 5 (id=3228): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a80800000006b"], 0x24}}, 0x4000040) 360.80196ms ago: executing program 3 (id=3229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) 209.601414ms ago: executing program 5 (id=3230): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3}) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000)=0x1, 0x4) 96.260337ms ago: executing program 5 (id=3231): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x3, 0xd59f7d, 0x4, 0x5, 0xb, 0x8, 0x100, 0x722, 0xe72, 0x7, 0x8, 0x38, 0x13, {0xffff945a, 0x1}, 0x13, 0xed}}) 194.92µs ago: executing program 3 (id=3232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000700)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x801}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24044808) 0s ago: executing program 5 (id=3233): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000005480)={0x0, 0x0, 0x3cdb, {0x2, 0x10000}, 0xfe, 0x80008}) kernel console output (not intermixed with test programs): 9.531208][ T5142] loop0: partition table partially beyond EOD, truncated [ 289.575192][ T5142] loop0: p3 start 4284289 is beyond EOD, truncated [ 289.760557][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 289.793427][T11419] loop3: detected capacity change from 0 to 1024 [ 289.860043][T11404] lo speed is unknown, defaulting to 1000 [ 289.897840][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 289.962937][T11419] hfsplus: request for non-existent node 16777216 in B*Tree [ 289.990245][T11419] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.188094][ T42] hfsplus: b-tree write err: -5, ino 25 [ 290.205405][ T42] hfsplus: b-tree write err: -5, ino 4 [ 290.218488][ T42] hfsplus: b-tree write err: -5, ino 2 [ 290.244900][ T42] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.274127][ T42] hfsplus: request for non-existent node 16777216 in B*Tree [ 291.123508][T11404] chnl_net:caif_netlink_parms(): no params data found [ 291.293334][T11459] loop0: detected capacity change from 0 to 4096 [ 291.336969][T11459] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 291.477277][T11459] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 291.547081][ T5778] Bluetooth: hci0: command tx timeout [ 292.004813][ T3486] hsr_slave_0: left promiscuous mode [ 292.037057][ T3486] hsr_slave_1: left promiscuous mode [ 292.063772][ T3486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.086511][ T3486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.109807][ T3486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.128202][ T3486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.144082][ T3486] bridge_slave_1: left allmulticast mode [ 292.150019][ T3486] bridge_slave_1: left promiscuous mode [ 292.155934][ T3486] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.178003][ T3486] bridge_slave_0: left allmulticast mode [ 292.183876][ T3486] bridge_slave_0: left promiscuous mode [ 292.195433][ T3486] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.257205][ T3486] veth1_macvtap: left promiscuous mode [ 292.262915][ T3486] veth0_macvtap: left promiscuous mode [ 292.276691][ T3486] veth1_vlan: left promiscuous mode [ 292.282177][ T3486] veth0_vlan: left promiscuous mode [ 292.342001][T11484] loop2: detected capacity change from 0 to 32768 [ 292.357053][T11484] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.2180 (11484) [ 292.400293][T11484] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 292.410596][T11484] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 292.421258][T11484] BTRFS info (device loop2): using free space tree [ 292.480645][T11484] BTRFS info (device loop2): enabling ssd optimizations [ 292.488022][T11484] BTRFS info (device loop2): auto enabling async discard [ 292.744400][ T5772] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 293.169855][ T5761] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 293.368787][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9990, setting to 1024 [ 293.380425][ T5761] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 293.416558][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.440447][ T5761] usb 4-1: config 0 descriptor?? [ 293.446200][T11516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.608641][ T5778] Bluetooth: hci0: command tx timeout [ 293.921264][ T5761] input: HID 28bd:0935 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0935.0018/input/input16 [ 294.006905][ T788] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 294.029837][ T5761] uclogic 0003:28BD:0935.0018: input,hidraw0: USB HID v7f.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.3-1/input0 [ 294.164921][ T5761] usb 4-1: USB disconnect, device number 17 [ 294.213886][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.226129][ T788] usb 3-1: not running at top speed; connect to a high speed hub [ 294.249136][ T788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.268932][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.307917][ T3486] team0 (unregistering): Port device team_slave_1 removed [ 294.313399][ T788] usb 3-1: string descriptor 0 read error: -22 [ 294.329518][ T788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.343916][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.374610][ T788] usb 3-1: 0:1 : does not exist [ 294.386512][ T788] usb 3-1: 0:2 : does not exist [ 294.421199][ T3486] team0 (unregistering): Port device team_slave_0 removed [ 294.497234][ T3486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.572339][ T3486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.584260][ T788] usb 3-1: 6:0: failed to get current value for ch 1 (-22) [ 294.613943][ T788] usb 3-1: 6:0: failed to get current value for ch 0 (-22) [ 294.684032][ T788] usb 3-1: USB disconnect, device number 19 [ 295.414694][T11531] loop3: detected capacity change from 0 to 32768 [ 295.432186][T11531] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.2190 (11531) [ 295.469950][T11531] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 295.482891][ T3486] bond0 (unregistering): Released all slaves [ 295.490376][T11531] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 295.519238][T11531] BTRFS info (device loop3): using free space tree [ 295.609178][T11531] BTRFS info (device loop3): enabling ssd optimizations [ 295.620996][T11531] BTRFS info (device loop3): auto enabling async discard [ 295.686595][ T5778] Bluetooth: hci0: command tx timeout [ 295.839687][ T5771] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 295.963923][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.993408][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.007822][T11404] bridge_slave_0: entered allmulticast mode [ 296.036915][T11404] bridge_slave_0: entered promiscuous mode [ 296.074963][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.104390][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.125756][T11404] bridge_slave_1: entered allmulticast mode [ 296.157331][T11404] bridge_slave_1: entered promiscuous mode [ 296.300674][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.342832][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.453791][T11404] team0: Port device team_slave_0 added [ 296.472848][T11404] team0: Port device team_slave_1 added [ 296.570408][T11569] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2198'. [ 296.610145][T11404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.647456][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.757536][T11404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.810399][T11404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.829749][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.838433][T11579] loop0: detected capacity change from 0 to 256 [ 296.866324][T11404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.041376][T11579] FAT-fs (loop0): Directory bread(block 64) failed [ 297.056601][T11579] FAT-fs (loop0): Directory bread(block 65) failed [ 297.099249][T11579] FAT-fs (loop0): Directory bread(block 66) failed [ 297.105846][T11579] FAT-fs (loop0): Directory bread(block 67) failed [ 297.147148][T11579] FAT-fs (loop0): Directory bread(block 68) failed [ 297.158501][T11579] FAT-fs (loop0): Directory bread(block 69) failed [ 297.165312][T11579] FAT-fs (loop0): Directory bread(block 70) failed [ 297.213809][T11404] hsr_slave_0: entered promiscuous mode [ 297.224798][T11579] FAT-fs (loop0): Directory bread(block 71) failed [ 297.248849][T11579] FAT-fs (loop0): Directory bread(block 72) failed [ 297.265690][T11404] hsr_slave_1: entered promiscuous mode [ 297.297618][T11579] FAT-fs (loop0): Directory bread(block 73) failed [ 297.570486][ T28] audit: type=1800 audit(1779883879.541:133): pid=11579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2200" name="file1" dev="loop0" ino=1048741 res=0 errno=0 [ 297.584094][T11579] syz.0.2200: attempt to access beyond end of device [ 297.584094][T11579] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 297.766990][ T5778] Bluetooth: hci0: command tx timeout [ 297.969448][T11606] netlink: 'syz.2.2211': attribute type 3 has an invalid length. [ 298.009624][T11404] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.013118][T11610] loop0: detected capacity change from 0 to 16 [ 298.042865][T11611] loop3: detected capacity change from 0 to 16 [ 298.059373][T11610] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 298.066597][T11404] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.087465][T11611] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 298.105416][ T5785] udevd[5785]: incorrect cramfs checksum on /dev/loop3 [ 298.145676][T11404] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.179689][T11404] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.250301][ T5785] udevd[5785]: incorrect cramfs checksum on /dev/loop3 [ 298.565697][T11404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.641752][T11404] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.706875][T11624] syz.2.2217 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 298.727831][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.735059][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.745223][T11625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2216'. [ 298.793769][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.801018][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.830031][T11625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2216'. [ 298.852958][T11629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2216'. [ 298.938341][T11633] loop2: detected capacity change from 0 to 256 [ 299.094885][T11637] loop3: detected capacity change from 0 to 64 [ 299.314552][T11617] loop0: detected capacity change from 0 to 32768 [ 299.422279][T11617] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 299.478281][T11617] JBD2: Ignoring recovery information on journal [ 299.561023][T11617] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 299.781146][T11404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.098179][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 300.176810][ T5761] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 300.399784][ T5761] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.419158][ T5761] usb 3-1: config 0 has no interface number 0 [ 300.436821][ T5761] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.462676][T11404] veth0_vlan: entered promiscuous mode [ 300.483461][ T5761] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.508760][T11404] veth1_vlan: entered promiscuous mode [ 300.530219][ T5761] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 300.562476][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.614095][ T5761] usb 3-1: config 0 descriptor?? [ 300.619435][T11404] veth0_macvtap: entered promiscuous mode [ 300.658778][T11404] veth1_macvtap: entered promiscuous mode [ 300.730585][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.757766][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.773950][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.784956][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.800338][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.819433][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.838135][T11404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.869924][ T788] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 300.888878][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.913291][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.924744][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.944377][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.956170][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.975832][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.989551][T11404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.015403][T11404] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.030459][T11404] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.057440][T11404] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.068937][ T5761] prodikeys 0003:041E:2801.0019: item fetching failed at offset 5/7 [ 301.076681][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 301.077200][T11404] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.094557][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.101841][ T5761] prodikeys 0003:041E:2801.0019: hid parse failed [ 301.131326][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.133971][ T5761] prodikeys: probe of 0003:041E:2801.0019 failed with error -22 [ 301.159963][ T788] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 301.197128][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.252240][ T788] usb 4-1: config 0 descriptor?? [ 301.345995][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.370340][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.398925][ T5815] usb 3-1: USB disconnect, device number 20 [ 301.473011][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.475643][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 301.508342][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.702376][T11697] netlink: 'syz.0.2233': attribute type 8 has an invalid length. [ 301.963204][ T788] ft260 0003:0403:6030.001A: failed to retrieve chip version [ 302.023264][ T788] ft260: probe of 0003:0403:6030.001A failed with error -71 [ 302.089807][T11710] loop5: detected capacity change from 0 to 128 [ 302.112440][ T788] usb 4-1: USB disconnect, device number 18 [ 302.196175][T11710] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.213796][T11710] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.332621][T11404] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.933353][T11744] loop3: detected capacity change from 0 to 64 [ 303.171881][T11747] loop5: detected capacity change from 0 to 2048 [ 303.295162][T11757] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.829327][T11764] loop3: detected capacity change from 0 to 32768 [ 303.860397][T11764] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 303.875020][T11764] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 1802)... [ 303.923408][T11764] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: no journals! [ 304.448677][T11793] loop0: detected capacity change from 0 to 16 [ 304.496367][T11793] erofs: (device loop0): mounted with root inode @ nid 36. [ 304.577585][ T28] audit: type=1800 audit(1779883886.541:134): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2263" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 305.004644][T11801] loop0: detected capacity change from 0 to 4096 [ 305.027402][T11801] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 305.190779][T11815] loop3: detected capacity change from 0 to 512 [ 305.269825][T11815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 305.327596][T11815] ext4 filesystem being mounted at /580/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.360683][T11823] tmpfs: Cannot retroactively limit inodes [ 305.565284][T11815] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 305.611339][T11815] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 305.671176][T11815] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2271: Failed to acquire dquot type 0 [ 305.932053][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 306.508178][T11863] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2289'. [ 307.211388][T11889] loop2: detected capacity change from 0 to 512 [ 307.212364][T11889] EXT4-fs: Ignoring removed bh option [ 307.226979][T11889] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 307.264519][T11889] EXT4-fs (loop2): 1 truncate cleaned up [ 307.281126][T11889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.356286][T11889] EXT4-fs warning (device loop2): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 307.511898][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.655821][T11902] loop5: detected capacity change from 0 to 128 [ 307.718442][T11902] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 307.764828][T11902] hpfs: filesystem error: improperly stopped [ 307.796530][T11902] hpfs: You really don't want any checks? You are crazy... [ 307.833503][T11902] hpfs: hpfs_map_sector(): read error [ 307.847796][T11902] hpfs: code page support is disabled [ 307.863827][T11902] hpfs: hpfs_map_4sectors(): unaligned read [ 307.874129][T11902] hpfs: hpfs_map_4sectors(): unaligned read [ 307.896601][T11902] hpfs: filesystem error: unable to find root dir [ 308.016646][ T5776] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 308.224524][ T5776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.242294][ T5776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.270342][ T5776] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 308.286686][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 308.299907][ T5776] usb 3-1: SerialNumber: syz [ 308.321854][ T5776] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 308.347291][ T5776] usb-storage 3-1:1.0: USB Mass Storage device detected [ 308.368578][T11924] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2310'. [ 308.407014][ T5776] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 308.415061][T11924] openvswitch: netlink: Tunnel attr 255 out of range max 16 [ 308.443624][ T5776] scsi host1: usb-storage 3-1:1.0 [ 308.458057][T11931] loop5: detected capacity change from 0 to 256 [ 308.470467][T11929] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 308.482206][T11931] exfat: Deprecated parameter 'namecase' [ 308.488461][T11931] exfat: Deprecated parameter 'namecase' [ 308.539472][T11931] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 309.060035][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2320'. [ 309.090466][T11951] loop5: detected capacity change from 0 to 256 [ 309.269978][T11956] loop3: detected capacity change from 0 to 64 [ 309.276638][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 309.617616][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.638444][T11964] loop0: detected capacity change from 0 to 2048 [ 309.640298][T11966] netlink: 'syz.3.2328': attribute type 2 has an invalid length. [ 309.669189][T11964] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 309.699795][T11968] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.834208][T11971] ip6gre2: entered promiscuous mode [ 309.843742][T11971] ip6gre2: entered allmulticast mode [ 310.053413][T11978] netlink: 209824 bytes leftover after parsing attributes in process `syz.0.2333'. [ 310.546491][ T5776] IPVS: starting estimator thread 0... [ 310.589725][ T788] usb 3-1: USB disconnect, device number 21 [ 310.644995][T12002] loop3: detected capacity change from 0 to 64 [ 310.659435][T11996] IPVS: using max 22 ests per chain, 52800 per kthread [ 310.817591][T12000] loop5: detected capacity change from 0 to 4096 [ 311.053709][T12011] loop3: detected capacity change from 0 to 1024 [ 311.196682][T12015] loop2: detected capacity change from 0 to 64 [ 311.422646][T12020] ipvlan2: entered promiscuous mode [ 311.438399][T12020] bridge0: port 3(ipvlan2) entered blocking state [ 311.450093][T12020] bridge0: port 3(ipvlan2) entered disabled state [ 311.497268][T12020] ipvlan2: entered allmulticast mode [ 311.506797][T12020] bridge0: entered allmulticast mode [ 311.529438][T12020] ipvlan2: left allmulticast mode [ 311.543515][T12020] bridge0: left allmulticast mode [ 311.610582][T12024] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 312.147542][T12039] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 312.182416][T12035] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 312.211673][T12039] tipc: Enabled bearer , priority 10 [ 312.335236][T12041] set_capacity_and_notify: 2 callbacks suppressed [ 312.335252][T12041] loop3: detected capacity change from 0 to 1764 [ 312.380100][T12035] ntfs: volume version 3.1. [ 312.410406][T12035] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 312.502829][T12035] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 312.613535][T12035] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 312.960577][T12033] sched: RT throttling activated [ 312.981261][T12035] ntfs: (device loop2): ntfs_readdir(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 313.091026][T12033] loop5: detected capacity change from 0 to 131072 [ 313.098634][T12033] XFS: ikeep mount option is deprecated. [ 313.153250][T12033] XFS (loop5): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 313.255185][T12033] XFS (loop5): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0xc0. [ 313.312657][T12033] XFS (loop5): Corruption warning: Metadata has LSN (1:192) ahead of current LSN (1:64). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 313.329821][T12033] XFS (loop5): log mount/recovery failed: error -22 [ 313.370493][T12033] XFS (loop5): log mount failed [ 314.282761][T12065] loop2: detected capacity change from 0 to 32768 [ 314.361801][T12065] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 314.399491][T12065] JBD2: Ignoring recovery information on journal [ 314.507683][T12093] loop5: detected capacity change from 0 to 8192 [ 314.525385][T12065] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 314.940410][T12106] loop0: detected capacity change from 0 to 64 [ 314.985907][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 315.176674][T12108] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2386'. [ 315.634356][T12124] sp0: Synchronizing with TNC [ 315.686788][T12123] [U] è` [ 315.687302][ T5815] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 315.886642][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 315.913446][ T5815] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 315.939224][ T5815] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 315.975131][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.995680][ T5815] usb 4-1: Product: syz [ 316.005356][ T5815] usb 4-1: Manufacturer: syz [ 316.021473][T12132] loop5: detected capacity change from 0 to 256 [ 316.032083][ T5815] usb 4-1: SerialNumber: syz [ 316.046970][ T5815] usb 4-1: config 0 descriptor?? [ 316.072935][ T5815] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 316.098324][ T5815] usb 4-1: setting power ON [ 316.107105][ T5815] dvb-usb: bulk message failed: -22 (2/0) [ 316.127837][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 316.133514][T12120] loop0: detected capacity change from 0 to 32768 [ 316.194126][ T5815] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 316.220099][ T5815] usb 4-1: media controller created [ 316.260356][T12120] read_mapping_page failed! [ 316.269276][T12120] ERROR: (device loop0): txCommit: [ 316.269276][T12120] [ 316.289003][T12116] dvb-usb: bulk message failed: -22 (3/0) [ 316.304241][T12116] cxusb: i2c wr: len=79 is too big! [ 316.304241][T12116] [ 316.319242][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.397152][ T5815] usb 4-1: selecting invalid altsetting 6 [ 316.403058][ T5815] usb 4-1: digital interface selection failed (-22) [ 316.432872][ T5815] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 316.460383][ T5815] usb 4-1: setting power OFF [ 316.475318][ T5815] dvb-usb: bulk message failed: -22 (2/0) [ 316.498492][T12138] loop2: detected capacity change from 0 to 8192 [ 316.507047][ T5815] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 316.543384][ T5815] (NULL device *): no alternate interface [ 316.544169][T12138] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 316.598882][T12138] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 316.620636][T12138] REISERFS (device loop2): using ordered data mode [ 316.627818][T12138] reiserfs: using flush barriers [ 316.637526][T12138] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 316.654962][ T5815] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 316.681543][ T5815] usb 4-1: USB disconnect, device number 19 [ 316.687413][T12138] REISERFS (device loop2): checking transaction log (loop2) [ 316.824919][T12146] loop5: detected capacity change from 0 to 512 [ 316.843386][T12145] loop0: detected capacity change from 0 to 128 [ 316.871266][T12146] EXT4-fs: Ignoring removed mblk_io_submit option [ 316.956972][T12146] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 316.998403][T12146] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 317.002485][T12138] REISERFS (device loop2): Using tea hash to sort names [ 317.017965][T12138] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 317.065669][T12146] EXT4-fs (loop5): orphan cleanup on readonly fs [ 317.090904][T12146] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.2403: Invalid block bitmap block 0 in block_group 0 [ 317.185469][T12146] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.2403: Invalid block bitmap block 0 in block_group 0 [ 317.268743][T12146] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.2403: Invalid block bitmap block 0 in block_group 0 [ 317.334049][T12146] Quota error (device loop5): write_blk: dquota write failed [ 317.357009][T12146] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 317.417153][T12146] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.2403: Failed to acquire dquot type 1 [ 317.445574][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.460922][T12146] EXT4-fs (loop5): 1 orphan inode deleted [ 317.479280][ T3422] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 317.512956][ T3422] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 317.598500][T12146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.846366][T12166] loop0: detected capacity change from 0 to 256 [ 317.858195][T11404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.498427][T12183] loop3: detected capacity change from 0 to 4096 [ 319.687356][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2430'. [ 319.760507][T12231] block nbd0: Unsupported socket: should be TCP or UNIX. [ 319.877798][T12228] loop0: detected capacity change from 0 to 4096 [ 320.380344][T12236] loop2: detected capacity change from 0 to 4096 [ 320.534603][T12240] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.637985][T12227] loop3: detected capacity change from 0 to 131072 [ 320.646550][T12227] XFS: ikeep mount option is deprecated. [ 320.708980][T12227] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 320.797652][T12243] loop5: detected capacity change from 0 to 4096 [ 320.814464][T12243] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 320.972683][T12243] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 321.037736][T12227] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0xc0. [ 321.103636][T12227] XFS (loop3): Corruption warning: Metadata has LSN (1:192) ahead of current LSN (1:64). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 321.118548][T12227] XFS (loop3): log mount/recovery failed: error -22 [ 321.170377][T12227] XFS (loop3): log mount failed [ 321.183894][T12255] loop2: detected capacity change from 0 to 4096 [ 321.290024][T12243] overlayfs: upper fs does not support tmpfile. [ 321.353095][T12243] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 321.481599][T12263] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.173443][T12280] loop3: detected capacity change from 0 to 764 [ 322.257133][T12280] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 322.338207][T12287] nbd: must specify an index to disconnect [ 322.516713][ T5776] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 322.759739][ T5776] usb 3-1: Using ep0 maxpacket: 32 [ 322.780262][ T5776] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 322.808497][ T5776] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 322.836623][ T5776] usb 3-1: config 0 has no interface number 0 [ 322.846393][ T5776] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 322.855032][ T5776] usb 3-1: config 0 has no interface number 0 [ 322.902040][ T5776] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 322.910984][ T5776] usb 3-1: config 0 has no interface number 0 [ 322.928000][ T5776] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 322.966848][ T5776] usb 3-1: config 0 has no interface number 0 [ 322.986670][ T5776] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 323.004967][ T5776] usb 3-1: config 0 has no interface number 0 [ 323.046900][ T5776] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 323.061060][ T5776] usb 3-1: config 0 has no interface number 0 [ 323.083585][ T5776] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 323.092609][T12302] loop5: detected capacity change from 0 to 4096 [ 323.099200][ T5776] usb 3-1: config 0 has no interface number 0 [ 323.109140][ T5776] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 323.128601][ T5776] usb 3-1: config 0 has no interface number 0 [ 323.157102][ T5776] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 323.183630][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.203513][T12311] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.217450][ T5776] usb 3-1: Product: syz [ 323.223653][ T5776] usb 3-1: Manufacturer: syz [ 323.229697][ T5776] usb 3-1: SerialNumber: syz [ 323.249404][ T5776] usb 3-1: config 0 descriptor?? [ 323.297044][ T5776] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 323.616780][ T5776] etas_es58x 3-1:0.2: could not retrieve the product info string [ 324.035757][T12328] loop0: detected capacity change from 0 to 64 [ 324.447077][ T5815] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 324.668915][ T5815] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.683855][ T5815] usb 4-1: config 0 has no interface number 0 [ 324.700727][ T5815] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 324.722337][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.733342][ T5815] usb 4-1: Product: syz [ 324.746905][ T5815] usb 4-1: Manufacturer: syz [ 324.756241][ T5815] usb 4-1: SerialNumber: syz [ 324.777459][ T5815] usb 4-1: config 0 descriptor?? [ 324.801691][ T5815] usb 4-1: selecting invalid altsetting 1 [ 324.830595][ T5815] dvb_ttusb_budget: ttusb_init_controller: error [ 324.839146][T12354] loop5: detected capacity change from 0 to 2048 [ 324.859301][ T5815] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 324.881472][T12359] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.923183][T12361] loop0: detected capacity change from 0 to 64 [ 324.956082][T12361] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 325.070103][ T5815] DVB: Unable to find symbol stv0299_attach() [ 325.187513][ T5815] DVB: Unable to find symbol tda8083_attach() [ 325.228287][ T5815] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 325.281657][ T5815] usb 4-1: USB disconnect, device number 20 [ 325.312675][ T789] usb 3-1: USB disconnect, device number 22 [ 325.338100][ T789] etas_es58x 3-1:0.2: Disconnecting syz syz [ 325.786528][T12383] loop0: detected capacity change from 0 to 256 [ 325.873059][T12383] FAT-fs (loop0): Directory bread(block 64) failed [ 325.885423][T12383] FAT-fs (loop0): Directory bread(block 65) failed [ 325.906814][T12383] FAT-fs (loop0): Directory bread(block 66) failed [ 325.933777][T12383] FAT-fs (loop0): Directory bread(block 67) failed [ 325.964220][T12383] FAT-fs (loop0): Directory bread(block 68) failed [ 325.991940][T12383] FAT-fs (loop0): Directory bread(block 69) failed [ 326.027885][T12383] FAT-fs (loop0): Directory bread(block 70) failed [ 326.051138][T12383] FAT-fs (loop0): Directory bread(block 71) failed [ 326.077127][T12383] FAT-fs (loop0): Directory bread(block 72) failed [ 326.083809][T12393] sch_fq: defrate 36451 ignored. [ 326.100385][T12383] FAT-fs (loop0): Directory bread(block 73) failed [ 326.174293][T12396] loop2: detected capacity change from 0 to 64 [ 326.624909][T12403] loop3: detected capacity change from 0 to 4096 [ 326.635655][T12408] loop0: detected capacity change from 0 to 2048 [ 326.660906][T12403] EXT4-fs: inline encryption not supported [ 326.711840][T12403] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 326.731437][T12403] EXT4-fs (loop3): Test dummy encryption mode enabled [ 326.749411][T12408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.762656][T12403] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 326.796617][T12403] System zones: 0-5 [ 326.842162][T12403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.930727][T12408] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 327.209167][T12417] loop2: detected capacity change from 0 to 4096 [ 327.250485][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.881569][T12440] IPv6: addrconf: prefix option has invalid lifetime [ 327.999592][T12440] IPv6: addrconf: prefix option has invalid lifetime [ 328.507946][T12429] loop5: detected capacity change from 0 to 32768 [ 328.575275][T12429] JBD2: Ignoring recovery information on journal [ 328.741748][T12429] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 328.963905][T12429] OCFS2: ERROR (device loop5): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 328.964071][T12429] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 329.016775][T12429] OCFS2: File system is now read-only. [ 329.122096][T12489] loop3: detected capacity change from 0 to 1024 [ 329.141849][T12489] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.144330][T12489] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 329.144699][T12489] EXT4-fs (loop3): orphan cleanup on readonly fs [ 329.166816][T11404] ocfs2: Unmounting device (7,5) on (node local) [ 329.177782][T12489] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 329.183359][T12489] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 329.183393][T12489] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 329.264502][T12489] EXT4-fs (loop3): 1 truncate cleaned up [ 329.327832][T12489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.526909][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.766863][ T5815] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 329.981694][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.990818][ T5815] usb 3-1: config 0 has no interface number 0 [ 330.010250][ T5815] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 330.027094][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.045422][ T5815] usb 3-1: Product: syz [ 330.046760][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'. [ 330.055232][ T5815] usb 3-1: Manufacturer: syz [ 330.066473][ T5815] usb 3-1: SerialNumber: syz [ 330.090209][ T5815] usb 3-1: config 0 descriptor?? [ 330.119733][ T5815] usb 3-1: selecting invalid altsetting 1 [ 330.125687][ T5815] dvb_ttusb_budget: ttusb_init_controller: error [ 330.157222][ T5815] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 330.325902][ T5815] DVB: Unable to find symbol stv0299_attach() [ 330.459750][ T5815] DVB: Unable to find symbol tda8083_attach() [ 330.465900][ T5815] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 330.514849][ T5815] usb 3-1: USB disconnect, device number 23 [ 330.940325][T12511] loop0: detected capacity change from 0 to 40427 [ 330.957388][T12511] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 330.970784][T12511] F2FS-fs (loop0): invalid crc value [ 331.005110][T12511] F2FS-fs (loop0): Found nat_bits in checkpoint [ 331.008084][T12547] loop3: detected capacity change from 0 to 512 [ 331.060324][T12547] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 331.151745][T12511] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 331.177836][T12547] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 331.211681][T12547] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2527: invalid indirect mapped block 2683928664 (level 1) [ 331.238025][T12547] EXT4-fs (loop3): Remounting filesystem read-only [ 331.292036][T12547] EXT4-fs (loop3): 1 truncate cleaned up [ 331.311508][T12547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.492414][T12560] dccp_invalid_packet: P.Data Offset(4) too small [ 331.537035][T12547] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 331.573889][T12547] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 331.615636][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.229989][T12581] veth1_macvtap: left promiscuous mode [ 332.241214][T12581] macsec0: entered allmulticast mode [ 332.293749][T12581] veth1_macvtap: entered promiscuous mode [ 332.318061][T12581] veth1_macvtap: entered allmulticast mode [ 332.324028][T12581] macsec0: left allmulticast mode [ 332.346833][T12581] veth1_macvtap: left allmulticast mode [ 332.769446][T12583] loop0: detected capacity change from 0 to 32768 [ 332.786828][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 332.887601][T12597] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2547'. [ 332.936943][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 332.955059][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2547'. [ 332.976782][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 332.982803][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.982845][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.982886][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 332.982907][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.985290][ T9] usb 4-1: config 0 descriptor?? [ 333.270848][T12606] ipvlan2: entered allmulticast mode [ 333.270874][T12606] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 333.435679][ T9] wacom 0003:056A:0084.001B: item fetching failed at offset 10/11 [ 333.444326][ T9] wacom 0003:056A:0084.001B: parse failed [ 333.444490][ T9] wacom: probe of 0003:056A:0084.001B failed with error -22 [ 333.699873][ T5815] usb 4-1: USB disconnect, device number 21 [ 333.829372][T12616] nbd: must specify a size in bytes for the device [ 333.869467][T12618] loop5: detected capacity change from 0 to 256 [ 333.909407][T12620] netlink: 'syz.2.2558': attribute type 3 has an invalid length. [ 334.032330][T12618] FAT-fs (loop5): Directory bread(block 64) failed [ 334.050855][T12618] FAT-fs (loop5): Directory bread(block 65) failed [ 334.074775][T12618] FAT-fs (loop5): Directory bread(block 66) failed [ 334.082721][T12618] FAT-fs (loop5): Directory bread(block 67) failed [ 334.094099][T12618] FAT-fs (loop5): Directory bread(block 68) failed [ 334.112061][T12618] FAT-fs (loop5): Directory bread(block 69) failed [ 334.124795][T12618] FAT-fs (loop5): Directory bread(block 70) failed [ 334.136316][T12618] FAT-fs (loop5): Directory bread(block 71) failed [ 334.144394][T12618] FAT-fs (loop5): Directory bread(block 72) failed [ 334.156263][T12618] FAT-fs (loop5): Directory bread(block 73) failed [ 334.350050][T12629] syz.0.2562 (12629) used obsolete PPPIOCDETACH ioctl [ 334.464934][T12636] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 334.659340][T12643] loop5: detected capacity change from 0 to 16 [ 334.686336][T12643] erofs: (device loop5): mounted with root inode @ nid 36. [ 335.142394][T12658] loop0: detected capacity change from 0 to 4096 [ 335.248164][T12658] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 335.316169][T12658] ntfs3: loop0: Failed to load $Extend (-22). [ 335.352874][T12658] ntfs3: loop0: Failed to initialize $Extend. [ 335.500468][T12674] loop2: detected capacity change from 0 to 256 [ 335.517766][T12674] exfat: Deprecated parameter 'namecase' [ 335.546891][T12674] exfat: Deprecated parameter 'namecase' [ 335.570948][T12674] exfat: Deprecated parameter 'namecase' [ 335.604396][T12674] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 335.665308][T12678] loop5: detected capacity change from 0 to 1024 [ 335.673797][T12674] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 336.396686][ T5815] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 336.469707][T12682] loop0: detected capacity change from 0 to 32768 [ 336.515859][T12699] loop3: detected capacity change from 0 to 1024 [ 336.587449][ T5815] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 336.604450][T12699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.639267][ T5815] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 336.648975][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.657608][ T5815] usb 3-1: Product: syz [ 336.661817][ T5815] usb 3-1: Manufacturer: syz [ 336.666930][ T5815] usb 3-1: SerialNumber: syz [ 336.678824][ T5815] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 336.792522][ T27] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 336.793528][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.154999][T12688] random: crng reseeded on system resumption [ 337.556947][ T9] usb 3-1: USB disconnect, device number 24 [ 337.756541][ T788] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 337.783434][T12715] loop0: detected capacity change from 0 to 32768 [ 337.848155][T12715] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 337.935598][ T27] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 337.957021][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 337.962944][ T27] ath9k_htc: Failed to initialize the device [ 337.967555][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.991013][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 337.999338][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.018858][ T788] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 338.028495][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.054187][ T788] usb 4-1: config 0 descriptor?? [ 338.061833][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 338.483457][ T788] belkin 0003:1020:0006.001C: invalid report_count 37697 [ 338.514703][ T788] belkin 0003:1020:0006.001C: item 0 2 1 9 parsing failed [ 338.533345][ T788] belkin 0003:1020:0006.001C: parse failed [ 338.546534][ T788] belkin: probe of 0003:1020:0006.001C failed with error -22 [ 338.556222][T12739] loop0: detected capacity change from 0 to 512 [ 338.615426][T12739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 338.635545][T12739] System zones: 1-20 [ 338.662720][T12739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.670297][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 338.711044][ T5815] usb 4-1: USB disconnect, device number 22 [ 338.797131][T12739] EXT4-fs: Cannot change journaled quota options when quota turned on [ 338.862313][T12747] loop2: detected capacity change from 0 to 64 [ 338.874581][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.132842][T12752] loop2: detected capacity change from 0 to 8 [ 339.163754][T12752] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 339.190984][ T5941] udevd[5941]: incorrect cramfs checksum on /dev/loop2 [ 339.236348][ T5941] udevd[5941]: incorrect cramfs checksum on /dev/loop2 [ 339.246740][T12752] cramfs: Error -3 while decompressing! [ 339.253138][T12752] cramfs: ffffffff97405328(26)->ffff88805b6e6000(4096) [ 339.296555][T12752] cramfs: Error -5 while decompressing! [ 339.302175][T12752] cramfs: ffffffff97405342(26)->ffff88805b6e7000(4096) [ 339.359986][T12752] cramfs: Error 2 while decompressing! [ 339.365522][T12752] cramfs: ffffffff9740535c(16)->ffff888054a09000(4096) [ 339.398379][T12752] cramfs: Error -3 while decompressing! [ 339.424375][T12752] cramfs: ffffffff97405328(26)->ffff88805b6e6000(4096) [ 339.447033][ T28] audit: type=1800 audit(1779883921.421:135): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2615" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 339.497791][T12745] loop5: detected capacity change from 0 to 32768 [ 339.560135][T12745] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 339.803563][T12745] XFS (loop5): Ending clean mount [ 339.890805][ T28] audit: type=1800 audit(1779883921.861:136): pid=12745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2611" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 339.968419][ T28] audit: type=1326 audit(1779883921.911:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.3.2622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211859ce59 code=0x7ffc0000 [ 340.020687][T11404] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 340.026304][ T28] audit: type=1326 audit(1779883921.911:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.3.2622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211859ce59 code=0x7ffc0000 [ 340.095434][ T28] audit: type=1326 audit(1779883921.921:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.3.2622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f211859ce59 code=0x7ffc0000 [ 340.181788][ T28] audit: type=1326 audit(1779883921.921:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.3.2622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211859ce59 code=0x7ffc0000 [ 340.190639][T12753] loop0: detected capacity change from 0 to 40427 [ 340.215762][ T28] audit: type=1326 audit(1779883921.921:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.3.2622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f211859ce59 code=0x7ffc0000 [ 340.240336][ T28] audit: type=1326 audit(1779883921.921:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.3.2622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211859ce59 code=0x7ffc0000 [ 340.253806][T12753] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 340.282110][T12753] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 340.388837][T12753] F2FS-fs (loop0): Found nat_bits in checkpoint [ 340.658794][T12753] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 340.668840][T12753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 340.898664][T12798] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2624'. [ 341.011047][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2633'. [ 341.884413][T12804] loop5: detected capacity change from 0 to 40427 [ 341.926525][T12804] F2FS-fs (loop5): Invalid log blocks per segment (83886089) [ 341.933966][T12804] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 341.977271][T12804] F2FS-fs (loop5): invalid crc value [ 342.007067][T12804] F2FS-fs (loop5): Found nat_bits in checkpoint [ 342.063156][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.092553][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.118471][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.129957][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.141221][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.152265][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.167796][T12804] F2FS-fs (loop5): Start checkpoint disabled! [ 342.171545][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.189469][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.205479][T12824] batadv_slave_1: entered promiscuous mode [ 342.255174][T12812] loop3: detected capacity change from 0 to 32768 [ 342.257073][T12804] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 342.280512][T12804] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 342.440344][T12812] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 342.644822][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.661000][ T1144] kworker/u4:6: attempt to access beyond end of device [ 342.661000][ T1144] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 342.724896][ T1144] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 342.762035][ T1144] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 342.993010][T12849] loop0: detected capacity change from 0 to 512 [ 343.015385][T12850] loop2: detected capacity change from 0 to 512 [ 343.092085][T12849] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.2651: dx entry: limit 0 != root limit 125 [ 343.142100][T12849] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2651: Corrupt directory, running e2fsck is recommended [ 343.155642][T12849] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 343.156039][T12850] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2652: inode has both inline data and extents flags [ 343.164333][T12849] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.2651: corrupted in-inode xattr: invalid ea_ino [ 343.231610][T12849] EXT4-fs (loop0): Remounting filesystem read-only [ 343.266185][T12849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.283552][T12850] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2652: couldn't read orphan inode 15 (err -117) [ 343.391484][T12850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.460722][T12850] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.2652: Directory hole found for htree leaf block 0 [ 343.502288][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.606045][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.763937][T12865] TCP: TCP_TX_DELAY enabled [ 344.144567][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2664'. [ 344.371043][T12887] mkiss: ax0: crc mode is auto. [ 344.424956][T12890] loop5: detected capacity change from 0 to 256 [ 344.472314][T12890] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 344.527288][T12890] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 344.674766][T12890] syz.5.2668: attempt to access beyond end of device [ 344.674766][T12890] loop5: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 344.734966][T12890] syz.5.2668: attempt to access beyond end of device [ 344.734966][T12890] loop5: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 344.778177][T12898] loop0: detected capacity change from 0 to 256 [ 344.790272][T12890] syz.5.2668: attempt to access beyond end of device [ 344.790272][T12890] loop5: rw=0, sector=280, nr_sectors = 8 limit=256 [ 344.821738][T12898] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 344.844593][T12876] loop3: detected capacity change from 0 to 32768 [ 344.851673][T12898] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 344.863233][ T28] audit: type=1800 audit(1779883926.821:143): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2668" name="file1" dev="loop5" ino=1048797 res=0 errno=0 [ 344.918679][T12876] JBD2: Ignoring recovery information on journal [ 345.018369][T12876] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 345.375565][T12896] loop2: detected capacity change from 0 to 32768 [ 345.407122][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 345.428927][T12896] JBD2: Ignoring recovery information on journal [ 345.614059][T12910] loop5: detected capacity change from 0 to 16 [ 345.624998][T12896] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 345.656911][T12910] erofs: (device loop5): mounted with root inode @ nid 36. [ 345.727117][T12913] bridge1: entered allmulticast mode [ 345.779239][T12913] team0: Port device bridge1 added [ 346.008882][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 346.638102][T12938] loop2: detected capacity change from 0 to 2048 [ 346.670608][T12938] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 346.707127][T12938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.846303][T12921] loop0: detected capacity change from 0 to 32768 [ 346.940273][ T9] XFS (loop0): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 347.421601][T12961] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 347.442298][T12959] loop0: detected capacity change from 0 to 1024 [ 347.457686][T12959] EXT4-fs: inline encryption not supported [ 347.469806][T12959] EXT4-fs: Ignoring removed mblk_io_submit option [ 347.516179][T12959] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 347.573845][T12959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.830952][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.376817][ T789] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 348.542304][T12997] loop0: detected capacity change from 0 to 256 [ 348.573261][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.618350][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.657833][T12997] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 348.670898][ T789] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.686628][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.695118][ T789] usb 3-1: SerialNumber: syz [ 348.701897][T12997] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 348.779020][T12997] syz.0.2712: attempt to access beyond end of device [ 348.779020][T12997] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 348.805207][T12997] syz.0.2712: attempt to access beyond end of device [ 348.805207][T12997] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 348.851188][T12997] syz.0.2712: attempt to access beyond end of device [ 348.851188][T12997] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 348.891372][ T28] audit: type=1800 audit(1779883930.861:144): pid=12997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2712" name="file1" dev="loop0" ino=1048798 res=0 errno=0 [ 348.954456][ T789] usb 3-1: 0:2 : does not exist [ 349.006681][ T789] usb 3-1: USB disconnect, device number 25 [ 349.049762][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.252272][T13011] loop3: detected capacity change from 0 to 4096 [ 349.279972][T13011] EXT4-fs (loop3): Test dummy encryption mode enabled [ 349.307925][T13011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.341981][T13011] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 349.397619][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.785560][T13026] netlink: 'syz.2.2724': attribute type 11 has an invalid length. [ 349.811359][T13026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2724'. [ 349.822922][T13002] loop5: detected capacity change from 0 to 40427 [ 349.867758][T13002] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 349.895152][T13002] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 349.949579][T13002] F2FS-fs (loop5): invalid crc value [ 349.950047][T13032] loop3: detected capacity change from 0 to 256 [ 349.990083][T13032] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 350.006546][T13002] F2FS-fs (loop5): Found nat_bits in checkpoint [ 350.021058][T13032] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 350.087311][T13032] syz.3.2727: attempt to access beyond end of device [ 350.087311][T13032] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 350.118080][T13032] syz.3.2727: attempt to access beyond end of device [ 350.118080][T13032] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 350.143833][T13002] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 350.156828][T13032] syz.3.2727: attempt to access beyond end of device [ 350.156828][T13032] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 350.175460][T13002] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 350.215464][ T28] audit: type=1800 audit(1779883932.181:145): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2727" name="file1" dev="loop3" ino=1048799 res=0 errno=0 [ 350.261944][ T788] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 350.462327][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.473388][ T788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 350.505875][ T788] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 350.535343][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.564152][ T788] usb 1-1: config 0 descriptor?? [ 350.580268][ T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 350.587715][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 350.602290][ T788] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 350.617414][ T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 350.625719][ T788] usb 1-1: media controller created [ 350.644492][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.689618][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 350.695495][ T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 350.745998][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 350.775272][ T788] dvb-usb: schedule remote query interval to 150 msecs. [ 350.795680][ T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 350.817515][T13036] dvb-usb: bulk message failed: -22 (2/0) [ 350.850717][ T788] usb 1-1: USB disconnect, device number 20 [ 350.926594][ T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 351.143180][T13057] loop3: detected capacity change from 0 to 256 [ 352.185689][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 352.235729][T13091] loop5: detected capacity change from 0 to 8 [ 352.314717][T13091] SQUASHFS error: Unable to read directory block [1d0:74] [ 352.358753][T13095] loop0: detected capacity change from 0 to 128 [ 352.392057][T13095] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.408369][T13095] ext4 filesystem being mounted at /690/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.580942][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.148909][T13124] genirq: Flags mismatch irq 6. 00000000 (pcl816) vs. 00000000 (pcl812) [ 353.297365][ T789] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 353.520282][ T789] usb 6-1: Using ep0 maxpacket: 32 [ 353.529236][ T789] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 353.537801][ T789] usb 6-1: config 0 has no interface number 0 [ 353.559183][ T789] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 353.570946][ T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.602662][ T789] usb 6-1: Product: syz [ 353.607742][ T789] usb 6-1: Manufacturer: syz [ 353.612490][ T789] usb 6-1: SerialNumber: syz [ 353.648999][ T789] usb 6-1: config 0 descriptor?? [ 353.678170][ T789] smsc95xx v2.0.0 [ 354.167740][T13158] loop2: detected capacity change from 0 to 256 [ 354.264555][T13158] FAT-fs (loop2): Directory bread(block 64) failed [ 354.287847][T13158] FAT-fs (loop2): Directory bread(block 65) failed [ 354.315803][T13158] FAT-fs (loop2): Directory bread(block 66) failed [ 354.345868][T13158] FAT-fs (loop2): Directory bread(block 67) failed [ 354.359226][T13158] FAT-fs (loop2): Directory bread(block 68) failed [ 354.383977][T13158] FAT-fs (loop2): Directory bread(block 69) failed [ 354.400316][T13158] FAT-fs (loop2): Directory bread(block 70) failed [ 354.427342][T13158] FAT-fs (loop2): Directory bread(block 71) failed [ 354.440978][T13158] FAT-fs (loop2): Directory bread(block 72) failed [ 354.457152][T13158] FAT-fs (loop2): Directory bread(block 73) failed [ 354.762253][T13173] loop3: detected capacity change from 0 to 1024 [ 354.788669][T13173] hfsplus: unable to parse mount options [ 354.834482][ T5941] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 354.914554][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'. [ 354.937125][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 355.074261][T13179] genirq: Flags mismatch irq 6. 00000000 (pcl816) vs. 00000000 (pcl812) [ 355.130487][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.166810][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 355.195685][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 355.219333][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.231623][T13181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2794'. [ 355.243713][ T9] usb 3-1: config 0 descriptor?? [ 355.263931][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 355.278899][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 355.309780][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 355.340293][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 355.360530][ T9] usb 3-1: media controller created [ 355.375476][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.404577][T13173] loop3: detected capacity change from 0 to 32768 [ 355.405346][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 355.429519][T13173] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2790 (13173) [ 355.451368][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 355.455774][T13173] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 355.489094][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 355.501492][T13171] dvb-usb: bulk message failed: -22 (2/0) [ 355.538136][T13173] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 355.555364][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 355.570223][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 355.577104][T13173] BTRFS info (device loop3): force zlib compression, level 3 [ 355.610031][ T9] usb 3-1: USB disconnect, device number 26 [ 355.632227][T13173] BTRFS info (device loop3): turning on flush-on-commit [ 355.672295][T13173] BTRFS info (device loop3): max_inline at 4096 [ 355.697497][T13173] BTRFS info (device loop3): using free space tree [ 355.704203][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 355.800088][T13173] BTRFS info (device loop3): enabling ssd optimizations [ 355.818442][T13173] BTRFS info (device loop3): auto enabling async discard [ 355.961035][ T5771] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 356.070723][ T789] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 356.125071][ T789] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 356.169899][ T789] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 356.201857][ T789] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 356.246747][ T789] usb 6-1: USB disconnect, device number 2 [ 356.372308][T13207] loop5: detected capacity change from 0 to 4096 [ 356.476310][T13212] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.092814][T13229] loop3: detected capacity change from 0 to 1024 [ 357.100759][T13229] EXT4-fs: Ignoring removed bh option [ 357.144889][T13229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.281216][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.646658][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 357.716705][ T789] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 357.836681][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 357.843809][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.855039][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.865861][ T9] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 357.875015][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.885534][ T9] usb 6-1: config 0 descriptor?? [ 357.937066][ T789] usb 4-1: Using ep0 maxpacket: 16 [ 357.949190][ T789] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 357.958502][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.967500][ T789] usb 4-1: Product: syz [ 357.971735][ T789] usb 4-1: Manufacturer: syz [ 357.976892][ T789] usb 4-1: SerialNumber: syz [ 357.983714][ T789] usb 4-1: config 0 descriptor?? [ 357.992647][ T789] gspca_main: spca508-2.14.0 probing 041e:4018 [ 358.036734][ T5776] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 358.200929][ T789] gspca_spca508: reg_read err -32 [ 358.218639][ T5776] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 358.227179][ T5776] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 358.235305][ T5776] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 358.245623][ T5776] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 358.257096][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 358.267638][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 358.278171][ T5776] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 358.295580][ T5776] usb 1-1: string descriptor 0 read error: -22 [ 358.302278][ T5776] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 358.311472][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.326272][ T9] ntrig 0003:1B96:0008.001D: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.5-1/input0 [ 358.347442][ T5776] usb 1-1: config 0 descriptor?? [ 358.362481][ T5776] hub 1-1:0.0: bad descriptor, ignoring hub [ 358.369522][ T5776] hub: probe of 1-1:0.0 failed with error -5 [ 358.390190][ T5776] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 358.418568][ T789] gspca_spca508: reg_read err -71 [ 358.431403][ T789] gspca_spca508: reg_read err -71 [ 358.457205][ T789] gspca_spca508: reg_read err -71 [ 358.468817][ T789] gspca_spca508: reg write: error -71 [ 358.488940][ T789] spca508: probe of 4-1:0.0 failed with error -71 [ 358.506123][ T789] usb 4-1: USB disconnect, device number 23 [ 358.537053][ T9] usb 6-1: USB disconnect, device number 3 [ 358.582863][ T5776] usb 1-1: USB disconnect, device number 21 [ 359.265652][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2829'. [ 359.439410][T13280] loop3: detected capacity change from 0 to 2048 [ 359.476746][T13280] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 359.523634][T13280] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 359.556841][T13280] UDF-fs: Scanning with blocksize 512 failed [ 359.603069][T13280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.688205][ T28] audit: type=1800 audit(1779883941.661:146): pid=13280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2831" name="file2" dev="loop3" ino=839 res=0 errno=0 [ 359.776820][ T5776] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 359.966921][ T5776] usb 6-1: Using ep0 maxpacket: 16 [ 359.982209][T13278] loop2: detected capacity change from 0 to 32768 [ 359.994556][ T5776] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 130, using maximum allowed: 30 [ 360.011691][ T5776] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 360.032626][ T5776] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 360.079827][ T5776] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.086997][ T5776] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 360.096076][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.114011][ T5776] usb 6-1: config 0 descriptor?? [ 360.178689][T13294] dummy0: entered promiscuous mode [ 360.194191][T13294] dummy0: left promiscuous mode [ 360.567417][ T5776] kye 0003:0458:0153.001E: unknown main item tag 0x2 [ 360.590186][ T5776] kye 0003:0458:0153.001E: unknown global tag 0xc [ 360.601175][ T5776] kye 0003:0458:0153.001E: item 0 2 1 12 parsing failed [ 360.610786][ T5776] kye 0003:0458:0153.001E: parse failed [ 360.620620][ T5776] kye: probe of 0003:0458:0153.001E failed with error -22 [ 360.865437][ T27] usb 6-1: USB disconnect, device number 4 [ 360.906666][T13305] loop3: detected capacity change from 0 to 64 [ 360.928926][T13309] loop2: detected capacity change from 0 to 512 [ 360.937615][T13309] EXT4-fs: Ignoring removed orlov option [ 360.943485][T13309] EXT4-fs: Ignoring removed mblk_io_submit option [ 360.948828][T13308] netlink: 'syz.0.2844': attribute type 3 has an invalid length. [ 360.953054][T13309] EXT4-fs: Ignoring removed mblk_io_submit option [ 360.982838][T13309] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.2845: corrupted in-inode xattr: e_value size too large [ 360.996781][T13305] hfs: filesystem is marked locked, mounting read-only. [ 361.008110][T13309] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2845: couldn't read orphan inode 15 (err -117) [ 361.028409][T13309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.068839][T13305] hfs: filesystem is marked locked, leaving read-only. [ 361.265427][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.348099][T13319] loop0: detected capacity change from 0 to 24 [ 361.536748][ T5776] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 361.746704][ T5776] usb 4-1: Using ep0 maxpacket: 32 [ 361.754542][ T5776] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.776362][ T5776] usb 4-1: config 0 has no interface number 0 [ 361.798103][ T5776] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 361.816933][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.824999][ T5776] usb 4-1: Product: syz [ 361.846907][ T5776] usb 4-1: Manufacturer: syz [ 361.851568][ T5776] usb 4-1: SerialNumber: syz [ 361.852418][T13328] loop0: detected capacity change from 0 to 256 [ 361.875700][ T5776] usb 4-1: config 0 descriptor?? [ 361.887293][T13328] exfat: Deprecated parameter 'namecase' [ 361.903873][ T5776] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 361.911247][T13328] exfat: Deprecated parameter 'utf8' [ 361.946576][ T5776] usb 4-1: selecting invalid altsetting 1 [ 361.952424][ T5776] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 361.964613][T13328] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 361.979659][ T5776] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 362.007229][ T5776] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 362.015601][ T5776] usb 4-1: media controller created [ 362.071528][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.162913][T13320] loop2: detected capacity change from 0 to 40427 [ 362.185845][T13320] F2FS-fs (loop2): invalid crc value [ 362.204597][T13320] F2FS-fs (loop2): Found nat_bits in checkpoint [ 362.423716][T13320] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 362.957024][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 363.120005][T13338] loop0: detected capacity change from 0 to 32768 [ 363.159155][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 363.170264][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 363.180871][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 363.192233][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 363.209160][ T5776] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 363.216399][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 363.225074][T13338] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 363.226112][ T5776] zl10353_read_register: readreg error (reg=127, ret==-110) [ 363.242127][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.250848][ T5776] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 363.260987][ T9] usb 6-1: config 0 descriptor?? [ 363.332973][ T5776] usb 4-1: USB disconnect, device number 24 [ 363.380246][T13338] XFS (loop0): Ending clean mount [ 363.444528][T13338] XFS (loop0): Quotacheck needed: Please wait. [ 363.501812][ T9] hdpvr 6-1:0.0: firmware version 0x1e dated [ 363.539751][T13338] XFS (loop0): Quotacheck: Done. [ 363.668113][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 363.716669][ T9] hdpvr 6-1:0.0: device init failed [ 363.722181][ T9] hdpvr: probe of 6-1:0.0 failed with error -12 [ 363.750022][ T9] usb 6-1: USB disconnect, device number 5 [ 364.242230][T13373] loop2: detected capacity change from 0 to 512 [ 364.255809][T13373] EXT4-fs: inline encryption not supported [ 364.375881][T13373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.391235][T13378] loop5: detected capacity change from 0 to 64 [ 364.398571][T13373] ext4 filesystem being mounted at /715/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.557984][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.699200][T13370] loop3: detected capacity change from 0 to 32768 [ 364.802358][T13370] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 364.998089][T13370] XFS (loop3): Ending clean mount [ 365.241652][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 365.429949][ T27] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 365.489191][T13409] loop5: detected capacity change from 0 to 128 [ 365.517448][T13409] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 365.570259][T13409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.636758][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 365.667378][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 130, using maximum allowed: 30 [ 365.687601][ T27] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 365.701499][ T27] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 365.715163][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 365.722339][ T27] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 365.777131][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.808727][ T27] usb 3-1: config 0 descriptor?? [ 365.920345][ T28] audit: type=1400 audit(1779883947.891:147): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D03 pid=13414 comm="syz.0.2883" [ 365.991495][T13417] loop5: detected capacity change from 0 to 2048 [ 366.009890][T13417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.238920][ T27] kye 0003:0458:0153.001F: unknown main item tag 0x2 [ 366.255319][ T27] kye 0003:0458:0153.001F: unknown global tag 0xc [ 366.293231][ T27] kye 0003:0458:0153.001F: item 0 2 1 12 parsing failed [ 366.303170][ T27] kye 0003:0458:0153.001F: parse failed [ 366.315700][ T27] kye: probe of 0003:0458:0153.001F failed with error -22 [ 366.511816][ T9] usb 3-1: USB disconnect, device number 27 [ 366.545705][T13436] loop5: detected capacity change from 0 to 256 [ 366.613938][T13438] loop0: detected capacity change from 0 to 2048 [ 366.682336][T13438] Alternate GPT is invalid, using primary GPT. [ 366.700667][T13438] loop0: p1 p2 p3 [ 366.704462][T13438] loop0: partition table partially beyond EOD, truncated [ 366.786760][ T27] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 366.976549][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 366.988932][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 367.004146][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 367.025464][ T27] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 367.039902][T13444] loop0: detected capacity change from 0 to 4096 [ 367.049697][ T27] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 367.059605][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.070466][ T27] usb 4-1: Product: syz [ 367.079035][ T27] usb 4-1: Manufacturer: syz [ 367.085150][ T27] usb 4-1: SerialNumber: syz [ 367.100291][T13445] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.105806][ T27] usb 4-1: config 0 descriptor?? [ 367.138866][ T27] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 367.155266][ T27] usb 4-1: setting power ON [ 367.164580][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 367.191842][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.214234][ T27] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 367.241086][ T27] usb 4-1: media controller created [ 367.271288][T13446] overlayfs: upper fs does not support tmpfile. [ 367.307870][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.308126][T13448] loop2: detected capacity change from 0 to 1024 [ 367.344048][T13435] dvb-usb: bulk message failed: -22 (3/0) [ 367.354982][T13446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 367.355308][T13448] hfsplus: unable to parse mount options [ 367.381356][T13446] overlayfs: failed to set xattr on upper [ 367.390145][T13435] dvb-usb: bulk message failed: -22 (33/0) [ 367.433490][T13446] overlayfs: ...falling back to redirect_dir=nofollow. [ 367.449603][ T27] usb 4-1: selecting invalid altsetting 6 [ 367.497143][ T27] usb 4-1: digital interface selection failed (-22) [ 367.503891][ T27] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 367.512817][T13446] overlayfs: ...falling back to index=off. [ 367.536958][T13446] overlayfs: ...falling back to uuid=null. [ 367.576975][ T27] usb 4-1: setting power OFF [ 367.586609][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 367.604588][T13442] loop5: detected capacity change from 0 to 32768 [ 367.612253][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 367.634943][ T27] (NULL device *): no alternate interface [ 367.672783][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 367.711073][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 367.714560][T13442] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 367.742131][ T27] usb 4-1: USB disconnect, device number 25 [ 367.885008][T13442] XFS (loop5): Ending clean mount [ 368.112171][T11404] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 368.171028][T13457] [U]  [ 368.353113][T13448] loop2: detected capacity change from 0 to 32768 [ 368.407500][T13448] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2899 (13448) [ 368.543993][T13448] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 368.570790][T13448] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 368.596546][T13448] BTRFS info (device loop2): force zlib compression, level 3 [ 368.604002][T13448] BTRFS info (device loop2): turning on flush-on-commit [ 368.619359][T13464] loop3: detected capacity change from 0 to 128 [ 368.636092][T13462] loop0: detected capacity change from 0 to 4096 [ 368.638629][T13448] BTRFS info (device loop2): max_inline at 4096 [ 368.680583][T13448] BTRFS info (device loop2): using free space tree [ 368.758012][T13464] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.774944][T13464] ext4 filesystem being mounted at /738/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 368.792680][T13462] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 368.832330][T13462] ntfs3: loop0: Failed to load $Extend (-22). [ 368.876230][T13462] ntfs3: loop0: Failed to initialize $Extend. [ 368.955813][T13462] overlayfs: upper fs does not support tmpfile. [ 368.969299][T13462] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 369.001949][T13448] BTRFS info (device loop2): enabling ssd optimizations [ 369.068937][T13462] overlayfs: failed to set uuid (/file0, err=-22); falling back to uuid=null. [ 369.078516][T13448] BTRFS info (device loop2): auto enabling async discard [ 369.148203][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.166094][T13462] overlayfs: failed to verify origin (/, ino=5, err=-22) [ 369.210022][T13462] overlayfs: failed to verify upper root origin [ 369.449515][ T3435] ntfs3: loop0: ino=9, ntfs3_write_inode failed, -22. [ 369.471676][ T5774] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 369.524584][ T5772] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 369.653364][T13503] loop0: detected capacity change from 0 to 512 [ 369.699703][T13503] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 369.752883][T13503] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c098, mo2=0002] [ 369.797177][T13503] System zones: 0-2, 18-18, 34-35 [ 369.924707][T13503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.016060][T13503] ext4 filesystem being mounted at /740/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.228685][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.404110][T13498] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 scanned by syz.5.2912 (13498) [ 370.492727][T13498] BTRFS info (device loop5): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 370.543984][T13498] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 370.612551][T13498] BTRFS info (device loop5): using free space tree [ 370.754700][T13509] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 370.803639][T13509] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 370.813659][T13529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 370.846751][T13509] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 370.857396][T13509] F2FS-fs (loop2): invalid crc value [ 370.865407][T13498] BTRFS info (device loop5): enabling ssd optimizations [ 370.868013][T13529] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 370.886192][T13498] BTRFS info (device loop5): auto enabling async discard [ 370.892077][T13509] F2FS-fs (loop2): Found nat_bits in checkpoint [ 370.911137][T13529] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.2918: Invalid block bitmap block 0 in block_group 0 [ 370.988857][T13529] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 371.032850][T13509] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 371.057030][T13529] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.2918: attempt to clear invalid blocks 983261 len 1 [ 371.079519][T13509] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 371.092947][T13529] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz.0.2918: Invalid inode table block 0 in block_group 0 [ 371.138623][T13529] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 371.159458][T13529] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 371.168755][T13529] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz.0.2918: Invalid inode table block 0 in block_group 0 [ 371.193160][T13529] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 371.217964][T13529] EXT4-fs error (device loop0): ext4_truncate:4301: inode #11: comm syz.0.2918: mark_inode_dirty error [ 371.251079][T13529] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 371.282060][T13529] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz.0.2918: Invalid inode table block 0 in block_group 0 [ 371.321403][T13529] EXT4-fs (loop0): 1 truncate cleaned up [ 371.332394][ T5772] syz-executor: attempt to access beyond end of device [ 371.332394][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 371.357769][T13529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.373577][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 371.395539][T11404] BTRFS info (device loop5): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 371.531148][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.826296][T13547] set_capacity_and_notify: 3 callbacks suppressed [ 371.826312][T13547] loop0: detected capacity change from 0 to 4096 [ 371.967833][T13547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.018841][T13555] loop5: detected capacity change from 0 to 512 [ 372.086157][T13555] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 372.152242][T13547] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.2923: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 372.220169][T13555] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 372.247289][T13547] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.2923: directory missing '..' [ 372.309375][T13555] EXT4-fs (loop5): 1 truncate cleaned up [ 372.331169][T13555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.469735][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.604179][T11404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.033556][T13577] loop2: detected capacity change from 0 to 4096 [ 373.042490][T13577] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 373.243129][T13588] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.2940' resets device [ 373.246136][T13577] ntfs3: loop2: failed to convert "c46c" to iso8859-13 [ 373.772123][T13603] loop3: detected capacity change from 0 to 512 [ 373.792687][T13603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 373.860355][T13603] EXT4-fs (loop3): 1 truncate cleaned up [ 373.883953][T13603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.092057][T13597] loop2: detected capacity change from 0 to 32768 [ 374.209085][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.614197][T13620] loop0: detected capacity change from 0 to 256 [ 374.660679][ T5941] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 374.904099][T13628] loop0: detected capacity change from 0 to 512 [ 374.941609][T13628] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.2959: Directory hole found for htree index block 0 [ 374.953102][T13628] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 374.954423][T13628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.143993][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.491548][T13646] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2966'. [ 375.517221][T13646] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 375.539664][T13646] openvswitch: netlink: Message has 1 unknown bytes. [ 376.131144][T13643] loop2: detected capacity change from 0 to 32768 [ 376.601693][T13679] loop3: detected capacity change from 0 to 512 [ 376.626393][T13679] EXT4-fs: Ignoring removed orlov option [ 376.639218][T13679] EXT4-fs (loop3): Test dummy encryption mode enabled [ 376.646064][T13679] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 376.695013][T13679] EXT4-fs (loop3): 1 truncate cleaned up [ 376.717953][T13679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.837808][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.872900][T13684] loop0: detected capacity change from 0 to 512 [ 376.971340][T13684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.049908][ T28] audit: type=1800 audit(1779883959.011:148): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2983" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 377.077406][T13691] loop3: detected capacity change from 0 to 8192 [ 377.111052][T13691] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 377.151139][T13691] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 377.180051][T13691] REISERFS (device loop3): using ordered data mode [ 377.194769][T13691] reiserfs: using flush barriers [ 377.206701][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.229801][T13691] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 377.287776][T13691] REISERFS (device loop3): checking transaction log (loop3) [ 377.548689][T13691] REISERFS (device loop3): Using tea hash to sort names [ 378.150729][T13718] vlan2: entered allmulticast mode [ 378.166269][T13718] bond0: entered allmulticast mode [ 378.184315][T13718] bond_slave_0: entered allmulticast mode [ 378.210915][T13718] bond_slave_1: entered allmulticast mode [ 378.613488][T13706] loop5: detected capacity change from 0 to 32768 [ 378.682491][T13706] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 378.883711][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.064576][T13706] XFS (loop5): Starting recovery (logdev: internal) [ 379.082170][T13754] netlink: 'syz.3.3011': attribute type 5 has an invalid length. [ 379.137125][T13706] XFS (loop5): Ending recovery (logdev: internal) [ 379.419220][T11404] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 379.515895][ T5761] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 379.611806][T13750] loop0: detected capacity change from 0 to 32768 [ 379.638880][T13750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3009 (13750) [ 379.679848][T13750] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 379.696539][ T5761] usb 3-1: Using ep0 maxpacket: 32 [ 379.704471][T13750] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 379.724020][ T5761] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 379.743992][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.752344][T13750] BTRFS info (device loop0): use no compression [ 379.761287][T13750] BTRFS info (device loop0): max_inline at 4096 [ 379.776114][ T5761] usb 3-1: Product: syz [ 379.782183][ T5761] usb 3-1: Manufacturer: syz [ 379.789072][T13750] BTRFS info (device loop0): using free space tree [ 379.797639][T13763] loop3: detected capacity change from 0 to 4096 [ 379.804086][ T5761] usb 3-1: SerialNumber: syz [ 379.822213][ T5761] usb 3-1: config 0 descriptor?? [ 379.842499][ T5761] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 379.851265][ T5761] dvb-usb: bulk message failed: -22 (4/0) [ 379.857781][ T5761] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 379.868586][ T5761] dvb-usb: bulk message failed: -22 (5/0) [ 379.874379][ T5761] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 379.891855][ T5761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 379.957037][ T5761] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 379.987731][ T5761] usb 3-1: media controller created [ 380.019516][T13750] BTRFS info (device loop0): enabling ssd optimizations [ 380.036552][T13750] BTRFS info (device loop0): auto enabling async discard [ 380.048890][T13757] dvb-usb: bulk message failed: -22 (7/0) [ 380.055392][T13757] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 380.066847][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.091357][ T5761] usb 3-1: selecting invalid altsetting 3 [ 380.097719][ T5761] ttusb2: set interface to alts=3 failed [ 380.126599][T13757] ttusb2: i2c transfer failed. [ 380.155629][T13763] ntfs3: loop3: failed to convert "0080" to cp864 [ 380.245766][ T5761] DVB: Unable to find symbol tda10086_attach() [ 380.253226][ T5761] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 380.294112][ T5761] dvb-usb: bulk message failed: -22 (4/0) [ 380.316872][ T5761] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 380.357143][ T5761] dvb-usb: bulk message failed: -22 (5/0) [ 380.376485][ T5761] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 380.417025][ T5761] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 380.446965][ T5774] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 380.452360][ T5761] usb 3-1: USB disconnect, device number 28 [ 380.617541][ T5761] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 380.630581][T13786] loop3: detected capacity change from 0 to 1024 [ 380.778958][ T5941] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop0 scanned by udevd (5941) [ 381.194952][T13784] loop5: detected capacity change from 0 to 32768 [ 381.225939][T13797] loop3: detected capacity change from 0 to 1024 [ 381.867109][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 382.061514][T13799] loop2: detected capacity change from 0 to 32768 [ 382.074450][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 382.094146][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.115093][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 382.136160][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 382.156977][T13799] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 382.178975][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 382.194668][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.226382][ T9] usb 1-1: Product: syz [ 382.232076][ T9] usb 1-1: Manufacturer: syz [ 382.252898][ T9] usb 1-1: SerialNumber: syz [ 382.388722][T13799] XFS (loop2): Starting recovery (logdev: internal) [ 382.486863][T13799] XFS (loop2): Ending recovery (logdev: internal) [ 382.550943][ T9] usb 1-1: Can't get UAC3 power state for id 10 [ 382.589642][ T9] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 382.624742][ T9] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 382.772244][ T5772] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 382.781398][T13810] loop5: detected capacity change from 0 to 32768 [ 382.832412][T13810] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 382.875132][T13810] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 382.959219][ T9] usb 1-1: USB disconnect, device number 22 [ 383.209561][T13810] XFS (loop5): Ending clean mount [ 383.272033][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.277302][T13810] XFS (loop5): Quotacheck needed: Please wait. [ 383.511600][T13810] XFS (loop5): Quotacheck: Done. [ 383.734332][T11404] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 383.931125][T13834] loop3: detected capacity change from 0 to 32768 [ 384.549614][T13843] loop0: detected capacity change from 0 to 32768 [ 384.647891][T13843] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 384.897322][T13847] loop2: detected capacity change from 0 to 40427 [ 384.965826][T13847] F2FS-fs (loop2): invalid crc value [ 385.005464][T13847] F2FS-fs (loop2): Found nat_bits in checkpoint [ 385.096202][T13843] syz.0.3039 (13843) used greatest stack depth: 18768 bytes left [ 385.247040][T13847] F2FS-fs (loop2): Start checkpoint disabled! [ 385.308925][T13847] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 385.313694][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 385.790389][ T1144] kworker/u4:6: attempt to access beyond end of device [ 385.790389][ T1144] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 385.813937][T13865] loop3: detected capacity change from 0 to 4096 [ 385.833943][ T1144] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 385.853339][ T1144] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 386.096581][ T5815] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 386.276715][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 386.290544][ T5815] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.311193][ T5815] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.324789][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 386.332859][ T5815] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 386.342461][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.385221][ T5815] usb 1-1: config 0 descriptor?? [ 386.841427][ T5815] hid (null): unknown global tag 0xa3 [ 386.860084][ T5815] lg-g15 0003:046D:0A07.0020: unexpected long global item [ 386.876142][T13897] loop3: detected capacity change from 0 to 512 [ 386.884046][ T5815] lg-g15: probe of 0003:046D:0A07.0020 failed with error -22 [ 386.987232][T13897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.037102][T13897] ext4 filesystem being mounted at /798/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.080937][ T5815] usb 1-1: USB disconnect, device number 23 [ 387.220397][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.454907][T13911] loop2: detected capacity change from 0 to 8192 [ 387.481641][T13911] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 387.490674][T13918] loop5: detected capacity change from 0 to 128 [ 387.512887][T13911] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 387.532390][T13911] REISERFS (device loop2): using ordered data mode [ 387.556820][T13918] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 387.559403][T13911] reiserfs: using flush barriers [ 387.576622][T13911] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 387.594789][T13911] REISERFS (device loop2): checking transaction log (loop2) [ 387.653069][T13918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.855470][T13911] REISERFS (device loop2): Using tea hash to sort names [ 388.326054][T13938] loop5: detected capacity change from 0 to 128 [ 388.355700][T13938] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.426128][T13938] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.559958][T11404] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.778089][T13957] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.136782][ T5776] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 389.253678][T13948] loop2: detected capacity change from 0 to 32768 [ 389.364236][ T5776] usb 4-1: Using ep0 maxpacket: 16 [ 389.381719][ T5776] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.407014][ T5776] usb 4-1: config 0 has no interface number 0 [ 389.421139][ T5776] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 389.438570][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.447238][ T5776] usb 4-1: Product: syz [ 389.451446][ T5776] usb 4-1: Manufacturer: syz [ 389.456147][ T5776] usb 4-1: SerialNumber: syz [ 389.470995][ T5776] usb 4-1: config 0 descriptor?? [ 389.486382][ T5776] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 389.513252][T13967] loop5: detected capacity change from 0 to 32768 [ 389.555632][T13967] JBD2: Ignoring recovery information on journal [ 389.601659][T13967] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 389.799811][T11404] ocfs2: Unmounting device (7,5) on (node local) [ 389.987243][T13975] loop0: detected capacity change from 0 to 4096 [ 390.143829][ T5776] gspca_spca1528: reg_w err -71 [ 390.170008][T13975] ntfs3: loop0: failed to convert "0080" to koi8-ru [ 390.190486][T13975] ntfs3: loop0: failed to convert name for inode 1e. [ 390.202315][ T5776] spca1528: probe of 4-1:0.1 failed with error -71 [ 390.242929][ T5776] usb 4-1: USB disconnect, device number 26 [ 390.497119][T13988] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3102'. [ 390.516935][T13988] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3102'. [ 390.800541][T13995] loop5: detected capacity change from 0 to 4096 [ 390.887879][T14004] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.996906][T13995] NILFS (loop5): nilfs_palloc_freev (ino=3): entry number 64 already freed [ 391.038891][T13995] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 391.311104][T14017] loop0: detected capacity change from 0 to 128 [ 391.388465][T14017] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.439349][T14017] ext4 filesystem being mounted at /788/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.643933][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.838129][T14039] loop0: detected capacity change from 0 to 256 [ 392.007475][T14047] netlink: 568 bytes leftover after parsing attributes in process `syz.3.3129'. [ 392.092793][T14049] loop0: detected capacity change from 0 to 128 [ 392.106570][ T5776] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 392.114722][ T28] audit: type=1326 audit(1779883974.081:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.3130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f211859ce59 code=0x0 [ 392.142508][T14049] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.155862][T14049] ext4 filesystem being mounted at /790/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 392.252898][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.317489][ T5776] usb 3-1: Using ep0 maxpacket: 32 [ 392.326197][ T5776] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 392.346936][ T5776] usb 3-1: config 0 interface 0 has no altsetting 0 [ 392.353609][ T5776] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 392.365681][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.396377][ T5776] usb 3-1: config 0 descriptor?? [ 392.817438][ T5776] hid (null): unknown global tag 0xd [ 392.823010][ T5776] hid (null): invalid report_count -893387286 [ 392.832694][T14067] loop0: detected capacity change from 0 to 2048 [ 392.843282][ T5776] waltop 0003:172F:0032.0021: unknown global tag 0xd [ 392.852720][ T5776] waltop 0003:172F:0032.0021: item 0 1 1 13 parsing failed [ 392.873376][ T5776] waltop: probe of 0003:172F:0032.0021 failed with error -22 [ 392.905299][T14067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.021568][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.039518][ T5776] usb 3-1: USB disconnect, device number 29 [ 393.507346][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 393.658683][T14094] loop0: detected capacity change from 0 to 256 [ 393.688733][T14094] exfat: Deprecated parameter 'utf8' [ 393.727016][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 393.730169][T14094] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 393.753262][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 393.774268][ T9] usb 4-1: config 0 has no interface number 0 [ 393.819088][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 393.840214][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.861590][ T9] usb 4-1: Product: syz [ 393.865816][ T9] usb 4-1: Manufacturer: syz [ 393.896666][ T9] usb 4-1: SerialNumber: syz [ 393.907836][ T9] usb 4-1: config 0 descriptor?? [ 393.939619][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 394.177203][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 394.212984][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 394.337831][T14092] loop5: detected capacity change from 0 to 32768 [ 394.439100][T14092] JBD2: Ignoring recovery information on journal [ 394.455472][T14103] loop0: detected capacity change from 0 to 4096 [ 394.501140][T14092] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 394.515033][T14103] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 394.713044][T14103] ntfs3: loop0: failed to convert "c46c" to iso8859-15 [ 394.743950][T11404] ocfs2: Unmounting device (7,5) on (node local) [ 394.752199][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 394.760402][ T9] usb 4-1: USB disconnect, device number 27 [ 394.775619][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 394.836342][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 394.890860][ T9] quatech2 4-1:0.51: device disconnected [ 395.361830][T14110] loop2: detected capacity change from 0 to 32768 [ 395.422621][T14110] JBD2: Ignoring recovery information on journal [ 395.580500][T14110] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 395.685498][T14112] loop0: detected capacity change from 0 to 32768 [ 395.723026][T14124] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 395.755823][T14124] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 395.771707][T14112] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 395.772302][T14124] OCFS2: File system is now read-only. [ 395.790294][T14124] (syz.2.3155,14124,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 395.799533][T14124] (syz.2.3155,14124,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 395.809555][T14124] (syz.2.3155,14124,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 395.818281][T14124] (syz.2.3155,14124,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 395.827628][T14124] (syz.2.3155,14124,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 395.835833][T14124] (syz.2.3155,14124,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 395.837685][T14112] JBD2: Ignoring recovery information on journal [ 395.844047][T14124] (syz.2.3155,14124,0):ocfs2_mknod:385 ERROR: status = -30 [ 395.859094][T14124] (syz.2.3155,14124,0):ocfs2_mknod:502 ERROR: status = -30 [ 395.867587][T14124] (syz.2.3155,14124,0):ocfs2_mkdir:659 ERROR: status = -30 [ 395.994880][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 396.024808][T14112] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 396.452668][T14139] mkiss: ax0: crc mode is auto. [ 396.525392][T14141] overlayfs: conflicting options: nfs_export=on,index=off [ 396.541710][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 396.901515][T14146] loop5: detected capacity change from 0 to 4096 [ 396.959248][T14146] ntfs: volume version 3.1. [ 397.034777][T14156] loop2: detected capacity change from 0 to 128 [ 397.108045][T14156] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 397.152934][T14146] ntfs: (device loop5): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 397.333574][T14162] loop3: detected capacity change from 0 to 512 [ 397.370364][ T3435] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 397.404268][T14162] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 397.486828][T14162] EXT4-fs (loop3): orphan cleanup on readonly fs [ 397.633190][T14162] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 397.687696][T14162] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.3178: corrupted inode contents [ 397.710596][T14162] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #12: comm syz.3.3178: mark_inode_dirty error [ 397.723574][T14162] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.3178: corrupted inode contents [ 397.741121][T14162] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3178: mark_inode_dirty error [ 397.788599][T14162] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.3178: corrupted inode contents [ 397.810540][T14162] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 397.815721][T14177] loop2: detected capacity change from 0 to 64 [ 397.849181][T14162] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.3178: corrupted inode contents [ 397.866315][T14162] EXT4-fs error (device loop3): ext4_truncate:4301: inode #12: comm syz.3.3178: mark_inode_dirty error [ 397.892602][ T28] audit: type=1800 audit(1779883979.851:150): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3184" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 397.923341][T14162] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 397.951280][T14162] EXT4-fs (loop3): 1 truncate cleaned up [ 397.972025][ T3435] Quota error (device loop3): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 397.982338][ T3435] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 1 [ 398.010103][T14162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.099159][T14179] loop0: detected capacity change from 0 to 2048 [ 398.147528][T14179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.209408][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.234866][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.665997][T14200] tmpfs: Cannot disable swap on remount [ 398.863863][T14206] loop0: detected capacity change from 0 to 256 [ 398.875325][T14206] exfat: Deprecated parameter 'namecase' [ 398.958973][T14206] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 399.216921][T14212] loop0: detected capacity change from 0 to 1024 [ 399.248056][T14212] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 399.370426][T14203] loop3: detected capacity change from 0 to 32768 [ 399.450502][T14217] loop5: detected capacity change from 0 to 256 [ 399.500705][T14217] FAT-fs (loop5): Directory bread(block 64) failed [ 399.519613][T14217] FAT-fs (loop5): Directory bread(block 65) failed [ 399.528439][T14217] FAT-fs (loop5): Directory bread(block 66) failed [ 399.542656][T14217] FAT-fs (loop5): Directory bread(block 67) failed [ 399.570600][T14217] FAT-fs (loop5): Directory bread(block 68) failed [ 399.596610][T14217] FAT-fs (loop5): Directory bread(block 69) failed [ 399.603296][T14217] FAT-fs (loop5): Directory bread(block 70) failed [ 399.643187][T14217] FAT-fs (loop5): Directory bread(block 71) failed [ 399.666914][T14217] FAT-fs (loop5): Directory bread(block 72) failed [ 399.673508][T14217] FAT-fs (loop5): Directory bread(block 73) failed [ 400.156583][ T5778] Bluetooth: hci0: command tx timeout [ 400.400241][T14219] loop3: detected capacity change from 0 to 32768 [ 400.408692][T14238] loop5: detected capacity change from 0 to 512 [ 400.440466][T14238] EXT4-fs (loop5): Test dummy encryption mode enabled [ 400.462330][T14238] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 400.463393][T14219] JBD2: Ignoring recovery information on journal [ 400.542556][T14238] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.3211: bad orphan inode 131083 [ 400.599056][T14248] loop2: detected capacity change from 0 to 256 [ 400.620643][T14248] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 400.630080][T14238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.689367][T14219] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 400.910901][T11404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.148243][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 401.184565][T14255] loop5: detected capacity change from 0 to 2048 [ 401.214422][T14255] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 401.244251][T14256] loop2: detected capacity change from 0 to 1024 [ 401.267595][T14255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.361555][T14256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.387427][T14256] CIFS: iocharset name too long [ 401.458097][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.562618][T14252] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 401.587244][T14252] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 401.643813][T14252] F2FS-fs (loop0): invalid crc value [ 401.744116][T14262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.885992][T14252] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 401.900468][T14252] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 401.946831][ T5776] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 401.982647][T11404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.156922][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 402.175986][ T5776] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.200178][ T5776] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 402.237843][ T5776] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 402.262699][T14278] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 402.281423][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.286167][T14280] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3227'. [ 402.524772][ T27] usb 3-1: USB disconnect, device number 30 [ 402.823117][T14293] [ 402.825513][T14293] ====================================================== [ 402.832542][T14293] WARNING: possible circular locking dependency detected [ 402.839571][T14293] syzkaller #0 Not tainted [ 402.843977][T14293] ------------------------------------------------------ [ 402.850992][T14293] syz.3.3232/14293 is trying to acquire lock: [ 402.857055][T14293] ffff88802f6914b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x72/0xa0 [ 402.867456][T14293] [ 402.867456][T14293] but task is already holding lock: [ 402.874914][T14293] ffff888078340690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 402.885788][T14293] [ 402.885788][T14293] which lock already depends on the new lock. [ 402.885788][T14293] [ 402.896540][T14293] [ 402.896540][T14293] the existing dependency chain (in reverse order) is: [ 402.905545][T14293] [ 402.905545][T14293] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 402.913805][T14293] __mutex_lock+0x136/0xcc0 [ 402.918878][T14293] __netlink_dump_start+0xf4/0x810 [ 402.924596][T14293] ip_set_dump+0x15c/0x1f0 [ 402.929545][T14293] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 402.935095][T14293] netlink_rcv_skb+0x241/0x4d0 [ 402.940509][T14293] nfnetlink_rcv+0x2c9/0x24a0 [ 402.945742][T14293] netlink_unicast+0x751/0x8d0 [ 402.951053][T14293] netlink_sendmsg+0x8d0/0xbf0 [ 402.956372][T14293] ____sys_sendmsg+0x5ba/0x960 [ 402.962287][T14293] ___sys_sendmsg+0x2a6/0x360 [ 402.967581][T14293] __se_sys_sendmsg+0x1c2/0x2b0 [ 402.972957][T14293] do_syscall_64+0x55/0xb0 [ 402.977890][T14293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.984485][T14293] [ 402.984485][T14293] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 402.992306][T14293] __mutex_lock+0x136/0xcc0 [ 402.997339][T14293] ip_set_nfnl_get_byindex+0x67/0x230 [ 403.003238][T14293] set_match_v1_checkentry+0x71/0x230 [ 403.009305][T14293] xt_check_match+0x4ea/0xc50 [ 403.014591][T14293] __nft_match_init+0x67a/0x8d0 [ 403.020500][T14293] nf_tables_newrule+0x176c/0x2880 [ 403.026146][T14293] nfnetlink_rcv+0x113e/0x24a0 [ 403.031432][T14293] netlink_unicast+0x751/0x8d0 [ 403.036734][T14293] netlink_sendmsg+0x8d0/0xbf0 [ 403.042017][T14293] ____sys_sendmsg+0x5ba/0x960 [ 403.047300][T14293] ___sys_sendmsg+0x2a6/0x360 [ 403.052506][T14293] __se_sys_sendmsg+0x1c2/0x2b0 [ 403.057968][T14293] do_syscall_64+0x55/0xb0 [ 403.062901][T14293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.069321][T14293] [ 403.069321][T14293] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 403.077756][T14293] __lock_acquire+0x2df1/0x7d40 [ 403.083130][T14293] lock_acquire+0x19e/0x420 [ 403.088170][T14293] __mutex_lock+0x136/0xcc0 [ 403.093391][T14293] nf_tables_dumpreset_obj+0x72/0xa0 [ 403.099223][T14293] netlink_dump+0x747/0xe50 [ 403.104265][T14293] __netlink_dump_start+0x5f1/0x810 [ 403.109980][T14293] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 403.116239][T14293] nf_tables_getobj_reset+0x1e1/0x630 [ 403.122330][T14293] nfnetlink_rcv_msg+0x8a4/0x12b0 [ 403.127889][T14293] netlink_rcv_skb+0x241/0x4d0 [ 403.133445][T14293] nfnetlink_rcv+0x2c9/0x24a0 [ 403.138673][T14293] netlink_unicast+0x751/0x8d0 [ 403.144180][T14293] netlink_sendmsg+0x8d0/0xbf0 [ 403.149579][T14293] ____sys_sendmsg+0x5ba/0x960 [ 403.154874][T14293] ___sys_sendmsg+0x2a6/0x360 [ 403.160248][T14293] __se_sys_sendmsg+0x1c2/0x2b0 [ 403.165638][T14293] do_syscall_64+0x55/0xb0 [ 403.171149][T14293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.177747][T14293] [ 403.177747][T14293] other info that might help us debug this: [ 403.177747][T14293] [ 403.188155][T14293] Chain exists of: [ 403.188155][T14293] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 403.188155][T14293] [ 403.203044][T14293] Possible unsafe locking scenario: [ 403.203044][T14293] [ 403.210593][T14293] CPU0 CPU1 [ 403.216038][T14293] ---- ---- [ 403.221585][T14293] lock(nlk_cb_mutex-NETFILTER); [ 403.226639][T14293] lock(nfnl_subsys_ipset); [ 403.233842][T14293] lock(nlk_cb_mutex-NETFILTER); [ 403.241475][T14293] lock(&nft_net->commit_mutex); [ 403.246569][T14293] [ 403.246569][T14293] *** DEADLOCK *** [ 403.246569][T14293] [ 403.255064][T14293] 1 lock held by syz.3.3232/14293: [ 403.260200][T14293] #0: ffff888078340690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 403.271220][T14293] [ 403.271220][T14293] stack backtrace: [ 403.277589][T14293] CPU: 1 PID: 14293 Comm: syz.3.3232 Not tainted syzkaller #0 [ 403.285090][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 403.295351][T14293] Call Trace: [ 403.298825][T14293] [ 403.302110][T14293] dump_stack_lvl+0x18c/0x250 [ 403.306887][T14293] ? load_image+0x420/0x420 [ 403.311559][T14293] ? show_regs_print_info+0x20/0x20 [ 403.316931][T14293] ? print_circular_bug+0x12b/0x1a0 [ 403.322529][T14293] check_noncircular+0x2fc/0x400 [ 403.327490][T14293] ? print_deadlock_bug+0x5d0/0x5d0 [ 403.332882][T14293] ? lockdep_lock+0xf5/0x230 [ 403.337666][T14293] ? _find_first_zero_bit+0xd3/0x100 [ 403.343808][T14293] __lock_acquire+0x2df1/0x7d40 [ 403.349064][T14293] ? mark_lock+0x94/0x320 [ 403.353627][T14293] ? __lock_acquire+0x1273/0x7d40 [ 403.358945][T14293] ? verify_lock_unused+0x140/0x140 [ 403.365644][T14293] ? stack_trace_snprint+0xf0/0xf0 [ 403.371386][T14293] ? kasan_set_track+0x4e/0x70 [ 403.376828][T14293] lock_acquire+0x19e/0x420 [ 403.381375][T14293] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 403.387140][T14293] ? __might_sleep+0xe0/0xe0 [ 403.391751][T14293] ? read_lock_is_recursive+0x20/0x20 [ 403.397480][T14293] __mutex_lock+0x136/0xcc0 [ 403.401998][T14293] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 403.407459][T14293] ? __kmem_cache_alloc_node+0x13a/0x250 [ 403.413099][T14293] ? nft_pernet+0x23/0x230 [ 403.417538][T14293] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 403.423024][T14293] ? __lock_acquire+0x7d40/0x7d40 [ 403.428224][T14293] ? mutex_lock_nested+0x20/0x20 [ 403.433173][T14293] ? nft_pernet+0x23/0x230 [ 403.437686][T14293] ? nft_pernet+0x23/0x230 [ 403.442113][T14293] nf_tables_dumpreset_obj+0x72/0xa0 [ 403.447407][T14293] netlink_dump+0x747/0xe50 [ 403.451920][T14293] ? netlink_lookup+0x200/0x200 [ 403.456947][T14293] ? netlink_lookup+0x30/0x200 [ 403.461795][T14293] ? netlink_lookup+0x30/0x200 [ 403.466557][T14293] ? nf_tables_dumpreset_obj_start+0x114/0x180 [ 403.472715][T14293] __netlink_dump_start+0x5f1/0x810 [ 403.478009][T14293] ? nft_netlink_dump_start_rcu+0xbb/0x1a0 [ 403.483810][T14293] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 403.489645][T14293] nf_tables_getobj_reset+0x1e1/0x630 [ 403.495228][T14293] ? nfnl_pernet+0x23/0x230 [ 403.500014][T14293] ? nf_tables_delobj+0x1090/0x1090 [ 403.505211][T14293] ? nf_tables_getobj_single+0x610/0x610 [ 403.510954][T14293] ? nf_tables_dumpreset_obj_start+0x180/0x180 [ 403.517208][T14293] ? nf_tables_dump_obj+0xdf0/0xdf0 [ 403.522777][T14293] ? __nla_parse+0x40/0x50 [ 403.527937][T14293] ? nf_tables_delobj+0x1090/0x1090 [ 403.533133][T14293] nfnetlink_rcv_msg+0x8a4/0x12b0 [ 403.538790][T14293] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.544975][T14293] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 403.550562][T14293] ? nfnetlink_unbind+0x160/0x160 [ 403.555628][T14293] ? __dev_queue_xmit+0x19a3/0x3660 [ 403.560878][T14293] ? __netlink_deliver_tap+0x5ab/0x830 [ 403.566451][T14293] ? netlink_deliver_tap+0x19c/0x1b0 [ 403.572011][T14293] ? netlink_unicast+0x72c/0x8d0 [ 403.576965][T14293] ? netlink_sendmsg+0x8d0/0xbf0 [ 403.581996][T14293] ? ____sys_sendmsg+0x5ba/0x960 [ 403.587198][T14293] ? ___sys_sendmsg+0x2a6/0x360 [ 403.592164][T14293] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 403.597550][T14293] ? do_syscall_64+0x55/0xb0 [ 403.602234][T14293] netlink_rcv_skb+0x241/0x4d0 [ 403.607102][T14293] ? nfnetlink_unbind+0x160/0x160 [ 403.612249][T14293] ? netlink_ack+0x1180/0x1180 [ 403.617238][T14293] ? apparmor_capable+0x137/0x1a0 [ 403.622625][T14293] ? bpf_lsm_capable+0x9/0x10 [ 403.627642][T14293] ? security_capable+0x89/0xb0 [ 403.632507][T14293] nfnetlink_rcv+0x2c9/0x24a0 [ 403.637791][T14293] ? __local_bh_enable_ip+0x13a/0x1c0 [ 403.643449][T14293] ? lockdep_hardirqs_on+0x98/0x150 [ 403.648755][T14293] ? __local_bh_enable_ip+0x13a/0x1c0 [ 403.654448][T14293] ? _local_bh_enable+0xa0/0xa0 [ 403.659839][T14293] ? __dev_queue_xmit+0x265/0x3660 [ 403.664962][T14293] ? __dev_queue_xmit+0x265/0x3660 [ 403.670251][T14293] ? __dev_queue_xmit+0x1b2c/0x3660 [ 403.675458][T14293] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 403.681089][T14293] ? __dev_queue_xmit+0x265/0x3660 [ 403.686321][T14293] ? ref_tracker_free+0x690/0x840 [ 403.691753][T14293] ? refcount_inc+0x70/0x70 [ 403.696567][T14293] ? __asan_memcpy+0x40/0x70 [ 403.701440][T14293] ? __skb_clone+0x63/0x790 [ 403.705955][T14293] ? __skb_clone+0x480/0x790 [ 403.710571][T14293] ? __netlink_deliver_tap+0x7e8/0x830 [ 403.716215][T14293] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.721873][T14293] ? __lock_acquire+0x7d40/0x7d40 [ 403.727638][T14293] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.732934][T14293] netlink_unicast+0x751/0x8d0 [ 403.737842][T14293] netlink_sendmsg+0x8d0/0xbf0 [ 403.743422][T14293] ? netlink_getsockopt+0x590/0x590 [ 403.748897][T14293] ? aa_sock_msg_perm+0x94/0x150 [ 403.753975][T14293] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 403.759997][T14293] ? security_socket_sendmsg+0x80/0xa0 [ 403.765827][T14293] ? netlink_getsockopt+0x590/0x590 [ 403.771063][T14293] ____sys_sendmsg+0x5ba/0x960 [ 403.775848][T14293] ? __asan_memset+0x22/0x40 [ 403.781019][T14293] ? __sys_sendmsg_sock+0x30/0x30 [ 403.786456][T14293] ? __import_iovec+0x5f2/0x850 [ 403.791447][T14293] ? import_iovec+0x73/0xa0 [ 403.796013][T14293] ___sys_sendmsg+0x2a6/0x360 [ 403.800730][T14293] ? __sys_sendmsg+0x2a0/0x2a0 [ 403.805664][T14293] __se_sys_sendmsg+0x1c2/0x2b0 [ 403.810646][T14293] ? __x64_sys_sendmsg+0x80/0x80 [ 403.815828][T14293] ? lockdep_hardirqs_on+0x98/0x150 [ 403.821076][T14293] do_syscall_64+0x55/0xb0 [ 403.826001][T14293] ? clear_bhb_loop+0x40/0x90 [ 403.830760][T14293] ? clear_bhb_loop+0x40/0x90 [ 403.836123][T14293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.842312][T14293] RIP: 0033:0x7f211859ce59 [ 403.846750][T14293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.866995][T14293] RSP: 002b:00007f211949d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.875774][T14293] RAX: ffffffffffffffda RBX: 00007f2118815fa0 RCX: 00007f211859ce59 [ 403.884105][T14293] RDX: 0000000024044808 RSI: 0000200000000180 RDI: 0000000000000003 [ 403.892098][T14293] RBP: 00007f2118632d6f R08: 0000000000000000 R09: 0000000000000000 [ 403.900070][T14293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.908094][T14293] R13: 00007f2118816038 R14: 00007f2118815fa0 R15: 00007fffcd5df968 [ 403.916394][T14293]